Privacy policy

1. Data controller

The controller of your data is María Llabrés Socias y Fernando Llabrés Socias, C.B., with registered address at Puerto Club de Mar, Muelle Pelaires, 07015 Palma de Mallorca, Illes Balears and contact email hola@holiboats.com.

2. What data we collect

We apply the data-minimisation principle: we collect only the data needed to manage your booking or enquiry.

• Booking data: name, email, phone and the date of the experience.
• Contact data: whatever you provide via the form or WhatsApp.
• Payment data: handled entirely by Stripe. Holiboats never sees or stores your card details.

3. Purpose and legal basis

• Managing your booking and providing the contracted service (legal basis: performance of a contract).
• Responding to your enquiries (legal basis: your consent or our legitimate interest in replying).
• Complying with our legal and tax obligations (legal basis: legal obligation).
• Web analytics via Google Analytics 4, only if you accept it (legal basis: your consent).

4. Retention

We keep your data for as long as needed to provide the service and, afterwards, for the applicable legal periods (for example, tax and accounting). It is then deleted or anonymised.

5. Recipients and data processors

To provide the service we share data with providers acting as data processors, each under its corresponding agreement (DPA):

• Supabase (booking database), with data hosted in the European Union (Frankfurt).
• Stripe (payment processing), with infrastructure in Europe.
• Google (Calendar for availability management and Analytics for web analytics).
• Resend (sending confirmation emails). See the section on international transfers.

6. International transfers

The confirmation email is sent through Resend, a US company. This involves an international transfer of data (name and email) outside the European Union, covered by the appropriate safeguards provided for in the GDPR. All other processing remains within the EU.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to hola@holiboats.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).